KelpDAO Affirms $290M Hack Attributed to North Korea's Lazarus Group

KelpDAO has confirmed a significant breach on April 18, 2026, affecting LayerZero's Decentralized Verifier Network (DVN). The attack resulted in a theft of $290-293 million, attributed to North Korea's Lazarus Group. This attribution highlights ongoing weaknesses in DeFi infrastructure, particularly systems relying on single-validator setups.

The market had already priced in the possibility of at least one $100M+ crypto hack occurring by year's end, with 255 days remaining in 2026. The breach effectively settles this prediction, with the outcome now considered certain. However, further investigation and statements from LayerZero may provide additional insights into the scope of the vulnerability.

Notably, KelpDAO's quick action prevented an additional $95 million drain by pausing contracts promptly. This swift response showcases the importance of robust security measures in DeFi ecosystems.